收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了1400多个poc/exp，长期更新。
☆68Jan 7, 2025Updated last year
Alternatives and similar repositories for POC
Users that are interested in POC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell co…☆32Feb 7, 2024Updated 2 years ago
- 三色哥斯拉（Godzilla）☆66Dec 27, 2024Updated last year
- 备份的漏洞库，3月开始我们来维护☆2,091Jul 13, 2026Updated last week
- 武器库、渗透测试、红蓝对抗、黑客攻防、目录扫描器、phpmyadmin爆破写一句话☆12Feb 20, 2021Updated 5 years ago
- Satori botnet variant☆14Mar 19, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- APT-GUID☆23Oct 23, 2020Updated 5 years ago
- A simple chrome-extension for website fingerprint extraction☆18May 28, 2025Updated last year
- 自动生成nuclei 2025HW poc☆128Jul 25, 2025Updated 11 months ago
- There is my vuln POC and EXP. Some of POC were collected, most of POC and EXP were written by myself.☆13May 28, 2022Updated 4 years ago
- 一个IDEA插件：一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件，复制到all-in-one文件夹，并自动添加为项目库。☆54Oct 30, 2025Updated 8 months ago
- PHP文件上传50+绕过手法全景解析☆18Mar 16, 2025Updated last year
- GitHubApi CVE Poc监控工具☆14Jan 23, 2026Updated 5 months ago
- JeecgCracker 是一个专门针对 JeecgBoot 框架的密码爆破工具。☆28Oct 29, 2024Updated last year
- 爬网站JS文件，自动fuzz api接口，指定api接口（针对前后端分离项目，可指定后端接口地址），回显api响应☆761Jul 20, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Windows满足等保的基线核查脚本☆22Oct 9, 2023Updated 2 years ago
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,555Updated this week
- 记录一些代码审计过的源码☆183Feb 26, 2025Updated last year
- 哥斯拉webshell管理工具二次开发规避流量检测设备☆1,068Dec 2, 2025Updated 7 months ago
- ☆59Aug 12, 2023Updated 2 years ago
- JavaSecLab is a comprehensive Java vulnerability platform｜ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互U…☆861Jun 9, 2026Updated last month
- 让fscan再次伟大☆357Jun 18, 2026Updated last month
- 该项目为Shellocde加载器，详细介绍了我们如何绕过防病毒软件，以及该工具如何使用☆21Jun 22, 2022Updated 4 years ago
- 自动化扫描利器，指纹识别更精准，漏洞扫描更全面☆381Oct 29, 2025Updated 8 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- VTI的PoC检测工具☆13Jul 30, 2024Updated last year
- 基于已收集指纹库进行识别网站指纹的浏览器插件☆120Jul 30, 2025Updated 11 months ago
- (SP)^3: A Simple, Practical, and Safe Packet Spoofing Protocol☆17Mar 13, 2017Updated 9 years ago
- 用于批量 扫描远程桌面是否关闭NLA，而后半自动寻找搜狗输入法RCE。☆22Oct 10, 2024Updated last year
- GeoServer（CVE-2024-36401/CVE-2024-36404）漏洞利用工具☆122Jan 17, 2025Updated last year
- the metasploit script(POC) about CVE-2021-36260☆20Nov 3, 2021Updated 4 years ago
- IDEA代码审计辅助插件（深信服深 蓝实验室天威战队强力驱动）☆585Mar 10, 2025Updated last year
- ☆31Nov 1, 2022Updated 3 years ago
- icp备案查询☆407Sep 1, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Chunsou（春蒐），Python3编写的多线程Web指纹识别工具,适用于安全测试人员前期的资产识别、风险收敛以及企业互联网资产风险摸查。☆395Jul 14, 2026Updated last week
- cve系列更新☆31Updated this week
- FindSomething本地移植版--HeartK☆97Jul 15, 2025Updated last year
- 用友畅捷通T（TPlus） SQL注入批量POC QVD-2023-13612☆16Jun 28, 2023Updated 3 years ago
- 安全基线☆19Jul 23, 2021Updated 4 years ago
- HFS RCE 利用工具，支持HFS主流版本☆15Jun 13, 2024Updated 2 years ago
- Java Vulnerability Exploitation Platform☆2,125Apr 29, 2026Updated 2 months ago